Pinned Loading

1. Pointman Pointman Public

   Advanced file identifier for Linux, written in Python. Inspired by TrID.

   Python

2. Sokol Sokol Public

   Sokol is a Powershell script designed to pull critical forensic artifacts from a target during IR, for direct analysis on a forensic workstation. It can be run via CrowdStrike RTR or manually via P…

   PowerShell 2

3. Emperor Emperor Public

   Emperor is a Bash script for Linux, designed to pull critical forensic artifacts from a target during IR, for direct analysis on a forensic workstation.

   Shell 1

4. Malware-RE-Write-Ups Malware-RE-Write-Ups Public

   My personal collection of malware analysis write-ups.

   2